$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer File: 6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer (raw, json) Hash identifier: 2QE+2yHHgiYccLMxx7kwBjya1ZwcdTlVP8JdxrDSGf0= Subject key identifier: 6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 239B760188CB8E922899DC22947DB46BB45795AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 03:19:44 +0000 Certificate not after: Fri 28 May 2027 03:24:44 +0000 Subordinate resources: IP: 103.99.76.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 04:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:9b:76:01:88:cb:8e:92:28:99:dc:22:94:7d:b4:6b:b4:57:95:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 03:19:44 2026 GMT Not After : May 28 03:24:44 2027 GMT Subject: CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a5:e1:81:c8:fe:7b:f2:5b:40:62:5d:8e:c0: 8d:77:8b:65:65:86:d5:1a:b1:56:d1:51:cc:e4:9e: 48:66:b7:5c:29:38:b3:3b:c6:b7:d5:5b:18:03:e6: e0:65:bb:67:c1:aa:9b:8d:53:13:e7:bb:d7:e3:21: b1:69:a0:7a:76:5b:35:75:f5:1f:8b:8b:1f:66:48: dc:fa:1e:06:ab:3a:3c:8c:fe:09:f6:cb:57:35:2c: 13:7b:55:e0:5c:ed:f7:f6:60:ac:8d:81:19:8c:88: 42:58:94:22:34:99:92:0d:e2:58:dc:91:d6:d5:81: ce:e2:35:91:7e:91:2e:39:b8:6c:d8:54:35:c1:c1: 7a:ed:cd:88:7b:e4:de:8c:21:79:85:02:08:ab:57: 65:c2:4d:8c:d1:39:b4:57:f9:2a:fe:db:80:5d:3a: af:ae:84:93:c3:3a:59:89:23:a5:2e:b8:7e:ec:f5: 78:77:e3:ed:a6:4e:50:bf:7b:46:08:09:af:d3:5a: 28:46:fb:26:e2:cb:cc:37:12:7f:55:de:b0:0f:25: e2:c6:08:98:2e:3c:53:4b:db:51:60:1c:a3:37:27: cb:53:37:55:46:2e:fa:8a:f5:20:41:bf:34:72:24: 64:a1:bb:d1:74:e1:38:45:f2:97:98:d3:65:40:72: 48:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.99.76.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:df:93:99:d3:2d:45:38:b8:a8:9c:43:6a:ac:33:0d:c5:47: 8a:c1:b5:9d:64:e6:29:7e:db:3b:a0:74:c6:1e:9a:bd:a3:1b: 7d:0c:51:aa:ff:b4:5a:9c:bf:68:66:22:9b:89:12:55:cd:95: 21:03:4f:88:ee:1c:67:07:13:74:89:8c:27:b0:c5:11:a0:ae: 91:ae:fd:c9:5a:d9:ec:0d:bd:94:63:65:38:de:51:c9:6b:b8: 02:7f:9e:d9:76:bd:e0:09:b0:cd:cc:bc:8c:a1:4c:f2:05:78: b2:29:9f:f8:76:05:ff:e3:f2:49:69:70:54:55:43:60:03:19: ae:b3:6e:fd:f2:8b:77:99:cb:76:13:87:b4:b5:6f:ba:d2:0b: b3:9b:b5:c0:db:38:1e:e9:48:36:1e:ab:44:a5:41:8a:76:7a: b7:98:64:5d:85:a5:ac:8f:ab:07:8a:88:01:b6:8c:f8:4d:f3: 42:7a:3a:a0:94:7c:bc:98:a7:48:87:f3:1e:6a:7e:16:ca:88: be:2c:1e:e6:d0:10:29:9a:94:e7:c3:f6:eb:fa:cd:32:90:e8: b5:43:6c:82:ec:58:e7:60:86:51:04:70:f8:29:b9:dd:83:a7: 19:de:51:3c:b8:83:bd:d7:ba:06:56:72:d9:f7:1f:45:1b:fa: c0:a0:6a:56 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUI5t2AYjLjpIomdwilH20a7RXlaswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTAzMTk0NFoX DTI3MDUyODAzMjQ0NFowMzExMC8GA1UEAxMoNkU2NTUxRERGMTVGQ0I2NDg1MDBB NzA4MEZBMzdEOEVFODYwMkE4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO2l4YHI/nvyW0BiXY7AjXeLZWWG1RqxVtFRzOSeSGa3XCk4szvGt9VbGAPm 4GW7Z8Gqm41TE+e71+MhsWmgenZbNXX1H4uLH2ZI3PoeBqs6PIz+CfbLVzUsE3tV 4Fzt9/ZgrI2BGYyIQliUIjSZkg3iWNyR1tWBzuI1kX6RLjm4bNhUNcHBeu3NiHvk 3owheYUCCKtXZcJNjNE5tFf5Kv7bgF06r66Ek8M6WYkjpS64fuz1eHfj7aZOUL97 RggJr9NaKEb7JuLLzDcSf1XesA8l4sYImC48U0vbUWAcozcny1M3VUYu+or1IEG/ NHIkZKG70XThOEXyl5jTZUBySI0CAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFG5lUd3xX8tkhQCnCA+jfY7oYCqGMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4ODMzNTUyNTIzMjY0MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4MzM1NTI1MjMyNjQx LzAvNkU2NTUxRERGMTVGQ0I2NDg1MDBBNzA4MEZBMzdEOEVFODYwMkE4Ni5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJnY0wwDQYJKoZIhvcNAQELBQADggEBAH/fk5nT LUU4uKicQ2qsMw3FR4rBtZ1k5il+2zugdMYemr2jG30MUar/tFqcv2hmIpuJElXN lSEDT4juHGcHE3SJjCewxRGgrpGu/cla2ewNvZRjZTjeUclruAJ/ntl2veAJsM3M vIyhTPIFeLIpn/h2Bf/j8klpcFRVQ2ADGa6zbv3yi3eZy3YTh7S1b7rSC7ObtcDb OB7pSDYeq0SlQYp2ereYZF2FpayPqweKiAG2jPhN80J6OqCUfLyYp0iH8x5qfhbK iL4sHubQECmalOfD9uv6zTKQ6LVDbILsWOdghlEEcPgpud2DpxneUTy4g73XugZW ctn3H0Ub+sCgalY= -----END CERTIFICATE-----Generated at Fri Jun 12 02:49:23 2026 by rpki-client